Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E272A9E5EF5088388CB8E9AE9F34BC0E520F1DB3.cer
File:                     E272A9E5EF5088388CB8E9AE9F34BC0E520F1DB3.cer (raw, json)
Hash identifier:          ObN0X3nSf9UpY6ro/CNGUdB7sBVPGmiA9kaeIimDfgI=
Subject key identifier:   E2:72:A9:E5:EF:50:88:38:8C:B8:E9:AE:9F:34:BC:0E:52:0F:1D:B3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3F7A5F9FD5AB2D2AA9A929BDAA963B88903CB1C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/E272A9E5EF5088388CB8E9AE9F34BC0E520F1DB3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 20 May 2024 18:39:15 +0000
Certificate not after:    Mon 19 May 2025 18:44:15 +0000
Subordinate resources:    AS: 266343
                          IP: 170.239.4.0/22
                          IP: 2804:365c::/32

Validation:               Failed, certificate revoked on Wed 03 Jul 2024 19:57:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:7a:5f:9f:d5:ab:2d:2a:a9:a9:29:bd:aa:96:3b:88:90:3c:b1:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 20 18:39:15 2024 GMT
            Not After : May 19 18:44:15 2025 GMT
        Subject: CN=E272A9E5EF5088388CB8E9AE9F34BC0E520F1DB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6c:fb:34:8b:9c:20:24:18:f5:49:1e:90:39:
                    18:64:7e:00:52:73:79:af:4f:ae:a5:1f:65:93:d8:
                    cc:30:cc:9c:97:db:c8:2c:f6:ef:64:a9:3b:1a:1e:
                    f1:75:ed:ad:07:f0:2d:10:4e:fd:68:9f:29:db:d0:
                    ec:33:1e:61:81:e9:36:d7:62:36:ca:ff:dd:a1:3f:
                    2b:4c:ee:e5:44:be:52:cf:58:5f:4e:ef:4f:06:20:
                    77:a9:37:1c:03:8b:56:cd:3f:4c:49:c4:c1:e7:e3:
                    05:45:d7:da:69:7a:04:62:fb:6a:5f:d7:1f:85:4f:
                    e7:d5:fc:32:2c:d9:b2:28:af:a0:8b:fc:9a:ea:d7:
                    76:a1:12:6b:33:9e:48:61:f0:26:a8:b3:b2:be:1a:
                    7b:52:37:6b:65:5e:95:a1:9b:f7:83:78:9d:44:e1:
                    e2:9e:f2:9c:c2:8b:6d:d6:15:fe:74:3b:5c:3d:ae:
                    7a:3a:b1:a7:9b:74:f0:09:5a:00:8e:45:13:08:bc:
                    38:78:ee:78:a1:55:10:2a:4a:8d:1d:d5:69:18:6f:
                    a6:23:10:f4:a0:47:ce:d9:6f:f9:9e:47:70:7a:b4:
                    f0:07:61:21:c9:4e:ae:22:c2:4c:b3:48:c7:e7:a1:
                    e2:c7:2b:5d:cf:3c:08:c2:89:0b:a4:a0:19:fb:b8:
                    54:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E2:72:A9:E5:EF:50:88:38:8C:B8:E9:AE:9F:34:BC:0E:52:0F:1D:B3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/E272A9E5EF5088388CB8E9AE9F34BC0E520F1DB3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.4.0/22
                IPv6:
                  2804:365c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266343

    Signature Algorithm: sha256WithRSAEncryption
         30:9a:e3:44:fd:eb:55:d9:87:0c:29:1c:ba:d3:90:9a:a4:46:
         88:7a:b3:2d:fc:01:6a:cd:4c:3c:08:4c:2b:ed:38:0b:b4:c0:
         9c:b5:66:79:76:74:87:14:cc:07:2b:34:ee:90:09:3c:c3:bc:
         76:f1:2d:8e:30:c9:4a:f3:61:8d:79:5c:81:6a:6b:02:10:91:
         61:94:b8:79:0b:97:5a:bc:f6:49:5a:90:e4:7a:95:92:e7:10:
         f5:06:a8:a6:0b:48:a1:a8:61:53:e0:ca:df:c6:99:0b:ed:3a:
         61:e3:a1:96:7e:73:05:16:b3:15:3c:62:9e:8c:27:c7:32:56:
         f6:89:72:d3:87:a4:18:4b:c6:83:7d:c9:98:dc:04:33:e9:83:
         6b:9e:b3:4d:75:5f:ab:24:77:c3:f9:d1:37:1b:e6:2e:87:a9:
         ec:c9:97:86:34:57:52:f2:99:98:6c:68:6b:5c:29:f1:43:9f:
         ef:51:74:e2:36:27:9b:72:79:9f:88:b5:de:18:08:bd:42:dc:
         b9:b7:9a:08:67:e8:f2:a1:b7:f1:4d:09:d0:05:8e:29:f9:76:
         e5:51:a4:08:5b:e3:e1:af:08:43:7f:9a:b6:32:fd:6d:5d:35:
         d1:ae:f9:f4:76:14:0a:f8:c2:6b:68:5d:96:67:7f:d1:1c:36:
         d0:fc:b2:31
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUP3pfn9WrLSqpqSm9qpY7iJA8scMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA1MjAxODM5MTVaFw0yNTA1MTkxODQ0MTVaMDMxMTAvBgNV
BAMTKEUyNzJBOUU1RUY1MDg4Mzg4Q0I4RTlBRTlGMzRCQzBFNTIwRjFEQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsbPs0i5wgJBj1SR6QORhkfgBS
c3mvT66lH2WT2MwwzJyX28gs9u9kqTsaHvF17a0H8C0QTv1onynb0OwzHmGB6TbX
YjbK/92hPytM7uVEvlLPWF9O708GIHepNxwDi1bNP0xJxMHn4wVF19ppegRi+2pf
1x+FT+fV/DIs2bIor6CL/Jrq13ahEmsznkhh8Caos7K+GntSN2tlXpWhm/eDeJ1E
4eKe8pzCi23WFf50O1w9rno6saebdPAJWgCORRMIvDh47nihVRAqSo0d1WkYb6Yj
EPSgR87Zb/meR3B6tPAHYSHJTq4iwkyzSMfnoeLHK13PPAjCiQukoBn7uFTVAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTicqnl71CIOIy4
6a6fNLwOUg8dszAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRUtN
TjZWbUNuSjNhbWQ4cndSVzlmR1paZ0JLOWRCbXFiemRCd21tZ3BlU2UvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VL
TU42Vm1DbkozYW1kOHJ3Ulc5ZkdaWmdCSzlkQm1xYnpkQndtbWdwZVNlLzAvRTI3
MkE5RTVFRjUwODgzODhDQjhFOUFFOUYzNEJDMEU1MjBGMURCMy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqu8EMA0EAgACMAcDBQAoBDZcMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQQZzANBgkqhkiG9w0BAQsFAAOCAQEAMJrjRP3rVdmHDCkc
utOQmqRGiHqzLfwBas1MPAhMK+04C7TAnLVmeXZ0hxTMBys07pAJPMO8dvEtjjDJ
SvNhjXlcgWprAhCRYZS4eQuXWrz2SVqQ5HqVkucQ9QaopgtIoahhU+DK38aZC+06
YeOhln5zBRazFTxinownxzJW9oly04ekGEvGg33JmNwEM+mDa56zTXVfqyR3w/nR
NxvmLoep7MmXhjRXUvKZmGxoa1wp8UOf71F04jYnm3J5n4i13hgIvULcubeaCGfo
8qG38U0J0AWOKfl25VGkCFvj4a8IQ3+atjL9bV010a759HYUCvjCa2hdlmd/0Rw2
0PyyMQ==
-----END CERTIFICATE-----
Generated at Wed Jul 3 21:23:36 2024 by rpki-client on console-ams.rpki-client.org